CVE Vulnerabilities

CVE-2024-29177

Insertion of Sensitive Information into Log File

Published: Jun 26, 2024 | Modified: Nov 21, 2024
CVSS 3.x
2.7
LOW
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a disclosure of temporary sensitive information vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to the reuse of disclosed information to gain unauthorized access to the application report.

Weakness

The product writes sensitive information to a log file.

Affected Software

Name Vendor Start Version End Version
Data_domain_operating_system Dell * 7.7.5.40 (excluding)
Data_domain_operating_system Dell 7.8.0.0 (including) 7.10.1.30 (excluding)
Data_domain_operating_system Dell 7.11.0.0 (including) 7.13.1.0 (excluding)

Potential Mitigations

References